Lambertgroup Apollo vulnerabilities

• apolloconfig apollo Apollo ConfigService access key authentication bypass via raw config file appId parsing CVE-2026-59955 Fix available 7.5 HighJuly 13, 2026
• apolloconfig apollo Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching CVE-2026-59954 7.5 HighJuly 13, 2026
• apolloconfig apollo Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId CVE-2025-32781 Fix available 6.5 MediumJuly 13, 2026
• lambertgroup apollo - sticky full width html5 audio player WordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48168 7.1 HighAugust 20, 2025
• gmod apollo GMOD Apollo Generation of Error Message Containing Sensitive Information CVE-2025-20002 6.9 MediumMarch 5, 2025
• gmod apollo GMOD Apollo Missing Authentication for Critical Function CVE-2025-24924 9.3 CriticalMarch 5, 2025
• gmod apollo GMOD Apollo Relative Path Traversal CVE-2025-23410 9.3 CriticalMarch 4, 2025
• gmod apollo GMOD Apollo Incorrect Privilege Assignment CVE-2025-21092 7.1 HighMarch 4, 2025
• apolloconfig apollo Potential unauthorized access issue in apollo-portal CVE-2024-43397 Fix available 4.3 MediumAugust 20, 2024
• apolloconfig apollo Apollo Configuration Center users improper authorization CVE-2022-4962 Disputed 4.3 MediumJanuary 12, 2024
• apolloconfig apollo Apollo has potential access control security issue in eureka CVE-2023-25570 Fix available 7.5 HighFebruary 20, 2023
• apolloconfig apollo apollo-portal has potential CSRF issue CVE-2023-25569 Fix available 5.7 MediumFebruary 20, 2023
• abreen apollo abreen Apollo path traversal CVE-2015-10043 5.5 MediumJanuary 14, 2023
• ctrip apollo Missing access control in apollo-adminservice CVE-2020-15170 Fix available 7.0 HighSeptember 10, 2020